EIP-2026-110293

This exploit demonstrates a file upload vulnerability in OpenEMR 5.0.1, allowing an attacker to upload a malicious PHP file via a POST request to controller.php. The uploaded file can then be executed to achieve remote code execution (RCE).